Solved

Search all GPOs at once

Posted on 2007-03-19
7
210 Views
Last Modified: 2012-05-05
I am using Windows Server 2003 Standard Edition, SP1 and I was wondering if there is any way to search all my GPOs at once?  I have a policy that is pushing a PowerUser group but I have no idea which policy it is.  Thanks!
0
Comment
Question by:cnalley
  • 3
  • 2
  • 2
7 Comments
 
LVL 51

Expert Comment

by:Netman66
ID: 18751971
Wait for Longhorn!  LOL....

Unfortunately, this is the pain point of GPOs - right now there is no easy way to do this.  You can run GPRESULT on the client machine and see exactly what policies are being applied to that workstation.  It's under the Computer Configuration.

0
 

Author Comment

by:cnalley
ID: 18752032
Thanks Netman66!

How about a third-party application.  Does anyone know of some add-on that can search all the GPOs for a phrase or something?  
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18752142
you can run rsop.msc on any machine within the domain and it will show you which policy is forcing the setting......it will only show policies that apply to itself however
0
 

Author Comment

by:cnalley
ID: 18752647
Thanks Jay Jay,
rsop only works for policies set with the standard settings.  We are using Policy Maker Pro which extends GPOs and they do not show in rsop so we really need something that will actually search through all the GPOs.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18752692
this is true :) sorry i didnt think about that little fact :)
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 500 total points
ID: 18752840
All the settings are simple INI's that are stored in SYSVOL\domain\policies - you may get a script to look at each for Restricted Groups - it'll only be present if the setting has been made.

Once found, then the GUID of the policy is the foldername and can be found in ADUC with Advanced turned on.

0
 

Author Comment

by:cnalley
ID: 18757499
You are a genius Netman!  Thank you so much.  

I'm using GPMC so I had to go to Group Policies and look at each one to find the GUID of the policy I was looking for but that was a much easier needle find in my haystack of GPOs.

0

Join & Write a Comment

The saying goes a bad carpenter blames his tools. In the Directory Services world a bad system administrator, well, even with the best tools they’re probably not going to become an all star.  However for the system admin who is willing to spend a li…
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now